b9d7c4d86c21db3fc68cd6e802c5b114_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9d7c4d86c21db3fc68cd6e802c5b114_JaffaCakes118
Size

326KB
MD5

b9d7c4d86c21db3fc68cd6e802c5b114
SHA1

20d0d3532964af82d0af6934a21437ed1358f158
SHA256

cdd0116c7c98c7ca68e4bb7727e91e2c3bf484038248bf448d6b1be2a64b51a8
SHA512

bd58dc2a053ee4a9f5678125a99c732ab0ab18b856f3c0de43a1685c4cfb698d9fc431743936f66fceb9735f2fcb5795bd814cbf20aed8191a126b285e47665a
SSDEEP

6144:Z373/ZrB3HqdnV2ykZcv/8p8qnIPWr5ym2HhDDIcblAszDPV8sX:J3/BB3HqdIySc68qIPWr5khDDIlKusX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9d7c4d86c21db3fc68cd6e802c5b114_JaffaCakes118

Files

b9d7c4d86c21db3fc68cd6e802c5b114_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f21e05129dc91033c5f7f93bbcfb525c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 260KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

7nhr7bh6
Size: 58KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zoqcitik
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ